$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4ad85dc9-4101-46b1-9aaf-1828e9cfb2d2.roa File: 4ad85dc9-4101-46b1-9aaf-1828e9cfb2d2.roa (raw, json) Hash identifier: MGr61SSrVqg3ZTMTLyQZAE7EIdDafaa1Vml4DC8uP4M= Subject key identifier: 9D:78:08:90:2A:34:0E:75:76:21:7A:8B:3E:B6:A3:1B:FA:28:00:1A Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5FADE88CC1BEB3DAB6E813C466FD3B5FFC2FE774 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4ad85dc9-4101-46b1-9aaf-1828e9cfb2d2.roa Signing time: Mon 22 Sep 2025 20:02:41 +0000 ROA not before: Mon 22 Sep 2025 20:02:41 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.165.30.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:ad:e8:8c:c1:be:b3:da:b6:e8:13:c4:66:fd:3b:5f:fc:2f:e7:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 20:02:41 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=cc04a5a6d27e24c6af684462dbd762e635194f31a950cfc2332afa93f54f4a28, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:74:d4:e5:4e:59:01:22:8a:69:9a:0c:89:2b: dc:ba:58:05:06:11:7f:96:1f:41:52:c6:63:06:ef: c5:0b:27:d5:ab:52:16:f1:03:7a:e4:17:12:bf:f1: fa:8c:ae:df:bc:a7:79:70:ca:26:38:23:07:a5:e9: 57:3e:86:94:78:ba:cd:89:ac:da:2c:98:aa:0e:c3: 05:51:ec:c8:4f:6e:46:ee:ef:98:de:7e:a8:04:16: 8c:86:6c:d3:c3:7a:93:4d:d3:1a:d0:1b:60:a5:0f: 43:95:cb:49:6d:df:fe:2f:7f:a5:27:d4:21:8c:20: 31:96:1f:18:4d:ed:e9:1e:2c:74:db:b2:8e:f4:c6: b1:a1:4d:d5:a0:7b:93:15:8b:18:51:b8:04:fa:33: 9d:3c:27:87:70:98:3a:f1:34:14:ac:cf:98:8d:5f: 11:b0:3c:16:66:b2:53:a3:cb:be:f5:5d:cd:fa:aa: c5:14:01:b3:2d:a2:88:ec:16:c9:26:eb:51:51:b6: d2:58:d2:35:8a:81:6e:e0:b9:46:0e:6b:dc:b4:3f: e6:a0:e0:b7:e6:2c:e9:c0:e1:6a:e1:ba:ec:4f:ca: 19:8f:85:74:64:af:fb:7f:3b:a8:10:ec:17:9c:56: 86:e7:2a:6c:40:56:de:ce:e6:62:fe:7a:6f:65:1d: cc:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:78:08:90:2A:34:0E:75:76:21:7A:8B:3E:B6:A3:1B:FA:28:00:1A X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4ad85dc9-4101-46b1-9aaf-1828e9cfb2d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.165.30.0/23 Signature Algorithm: sha256WithRSAEncryption 03:c3:b7:0a:95:35:3d:4d:b2:31:de:c4:b0:41:fd:81:5c:3a: 22:65:ca:85:d7:6b:25:5c:3d:da:94:8b:6f:13:04:d1:e4:9f: 76:6b:44:13:ef:49:31:66:da:5f:4b:2e:da:f7:3d:a7:7e:c6: 7d:55:d7:4f:02:bf:3b:50:15:67:1d:54:1f:97:b0:fb:95:82: 90:d2:0c:4a:b4:2d:3f:31:f8:72:b9:cb:15:8e:b6:48:dc:ac: 9d:79:3e:13:b0:82:3c:70:bf:87:6d:3f:bc:dc:82:fe:75:f5: 8f:9e:39:68:8a:33:9f:fb:e3:4e:2d:ef:6b:a8:b9:a8:8e:67: 7e:81:97:d7:56:24:bd:e7:1f:3d:20:01:1a:bc:20:ee:d4:65: ad:7b:40:9c:2d:e6:12:30:e2:56:ba:c3:cc:19:1e:9a:47:12: b2:f5:80:7f:d9:0a:e8:7a:30:a0:19:7f:95:1c:3b:bf:39:31: c6:98:11:73:00:00:30:ff:e6:1a:f1:db:3a:95:ad:a9:39:73: f3:50:4a:62:05:e8:d5:ce:6d:db:b5:2c:03:26:ad:84:b4:6d: 24:a0:f7:15:a2:38:4e:b0:0f:06:76:86:ce:be:ca:2d:cd:91: d5:de:6f:19:5e:04:d7:e4:cf:14:60:9f:05:60:4b:1f:03:55: 9a:58:88:50 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUX63ojMG+s9q26BPEZv07X/wv53QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjAwMjQxWhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BjYzA0YTVhNmQyN2UyNGM2YWY2ODQ0NjJkYmQ3NjJlNjM1 MTk0ZjMxYTk1MGNmYzIzMzJhZmE5M2Y1NGY0YTI4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJdNTlTlkBIoppmgyJK9y6WAUGEX+WH0FSxmMG78ULJ9Wr UhbxA3rkFxK/8fqMrt+8p3lwyiY4Iwel6Vc+hpR4us2JrNosmKoOwwVR7MhPbkbu 75jefqgEFoyGbNPDepNN0xrQG2ClD0OVy0lt3/4vf6Un1CGMIDGWHxhN7ekeLHTb so70xrGhTdWge5MVixhRuAT6M508J4dwmDrxNBSsz5iNXxGwPBZmslOjy771Xc36 qsUUAbMtoojsFskm61FRttJY0jWKgW7guUYOa9y0P+ag4LfmLOnA4WrhuuxPyhmP hXRkr/t/O6gQ7BecVobnKmxAVt7O5mL+em9lHcxdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUnXgIkCo0DnV2IXqLPrajG/ooABowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzRhZDg1ZGM5LTQxMDEtNDZiMS05YWFmLTE4MjhlOWNmYjJkMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESpR4wDQYJKoZIhvcNAQELBQADggEBAAPDtwqVNT1NsjHexLBB/YFcOiJl yoXXayVcPdqUi28TBNHkn3ZrRBPvSTFm2l9LLtr3Pad+xn1V108CvztQFWcdVB+X sPuVgpDSDEq0LT8x+HK5yxWOtkjcrJ15PhOwgjxwv4dtP7zcgv519Y+eOWiKM5/7 404t72uouaiOZ36Bl9dWJL3nHz0gARq8IO7UZa17QJwt5hIw4la6w8wZHppHErL1 gH/ZCuh6MKAZf5UcO785McaYEXMAADD/5hrx2zqVrak5c/NQSmIF6NXObdu1LAMm rYS0bSSg9xWiOE6wDwZ2hs6+yi3NkdXebxleBNfkzxRgnwVgSx8DVZpYiFA= -----END CERTIFICATE-----Generated at Sat Oct 18 00:13:04 2025 by rpki-client